blog

  •  Home
  •  About
  •  Blog
  •  Projects
  •  Posts
  •  Categories
  •  Contact
  • Search
  • Menu
  •  Home

  •  About

  •  Blog

  •  Projects

  •  Posts

  •  Categories

  •  Contact

Recent Posts

Sourcing Cve-free Container Images for Production Kubernetes

July 31, 2026

Inventorying Cryptography in Kubernetes: Policy, Tools, and Tradeoffs

July 30, 2026

Managing Ai Agents as Kubernetes Platform Users

July 29, 2026

Istio Sidecar Proxy Capture Scope and Limitations

July 28, 2026

Validating and Refining Your Kubernetes Study Plan

July 27, 2026
View more posts

Secure Internal Applications with Layered Access Controls on Envoy Gateway

Use IP allowlisting for a basic perimeter, combine with OIDC for identity verification.

March 25, 2026 JR

3 minute read

Use IP allowlisting for a basic perimeter, combine with OIDC for identity verification, and consider zero trust overlays like OpenZiti for scalable security.

  • Continue Reading
    • Kubernetes
    • Security
    • DevSecOps

RBAC Audit Compliance for Kubernetes: Practical Enforcement and Verification

Implement RBAC audits by enforcing policies with Kyverno, validating access controls.

March 24, 2026 JR

2 minute read

Implement RBAC audits by enforcing policies with Kyverno, validating access controls, and maintaining audit trails to meet compliance requirements.

  • Continue Reading
    • Kubernetes
    • Security
    • DevSecOps

Falco in Production: Tuning, Integration, and Operational Realities

Falco detects runtime threats in Kubernetes but requires deliberate tuning and alerting integration to avoid drowning in noise.

March 23, 2026 JR

2 minute read

Falco detects runtime threats in Kubernetes but requires deliberate tuning and alerting integration to avoid drowning in noise.

  • Continue Reading
    • Kubernetes
    • Security
    • DevSecOps
  • Previous Page
  • Next Page
Hugo Future Imperfect

OpenShift & Kubernetes Mechanic

Preventative maintenance, routine care, and repairs for Kubernetes & OpenShift clusters

Recent Posts

Sourcing Cve-free Container Images for Production Kubernetes

July 31, 2026

Inventorying Cryptography in Kubernetes: Policy, Tools, and Tradeoffs

July 30, 2026

Managing Ai Agents as Kubernetes Platform Users

July 29, 2026

Istio Sidecar Proxy Capture Scope and Limitations

July 28, 2026

Validating and Refining Your Kubernetes Study Plan

July 27, 2026
View more posts

Categories

devsecops 161

kubernetes 161

security 161

news 16

coding 14

infrastructure-management 12

infrastructure 11

k8s 5

living 4

nagios 3

openshift 3

check_mk 1

features 1

hugo 1

motorycles 1

powershell 1

About

I’m a Red Hatter working as a Solutions Architect, formerly a Senior Cloud Success Architect, with a focus on and passion for OpenShift and Ansible. Previous life? Cloud Advanced Technology Lead & Big Data Engineer for Lockheed Martin Space, IT/IS Data Center Manager for Lockheed Martin IS&GS, and Senior Infrastructure Designer/Administrator for the City of Gainesville & City of Alachua.

Learn More

© 2026 Live Average . Powered by Hugo